Owning the Message Oriented Middleware - Security Analysis and Attacks
Explore enterprise messaging security from JMS API, ActiveMQ vulnerabilities, and JMSDigger tool perspectives. Learn offensive techniques and live demonstrations for assessing messaging applications.
Web Application Security: The Secret to Hack-Proof Apps - SQL Injection - Part 2
Discover step-by-step methods to secure web applications from SQL injection threats. Learn to identify vulnerabilities, exploit techniques, and implement effective prevention strategies for robust security.
Forensic Analysis of Compromised VPN Appliances by Advanced Actors
Arm yourself with techniques to analyze VPN-related intrusions, understand threat actor tactics, and identify IOCs. Gain actionable insights for improved incident response and VPN defense.
Breaking Bad Multifactor - MFA Bypasses and How to Assess the Risks
Explore MFA bypass techniques and risk assessment strategies to enhance cybersecurity defenses and protect against evolving threats in authentication systems.
Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms
Explore device authentication in Entra ID, uncovering vulnerabilities in Conditional Access. Learn about attack methods, defense strategies, and gain insights into Microsoft's cloud security infrastructure.
Finding and Exploiting Critical Vulnerabilities in RPC Services - NorthSec 2023
Comprehensive walkthrough of finding, exploiting, and reporting critical vulnerabilities in an RPC service, covering reverse engineering, authentication bypass, and coordinated disclosure.
One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
Hunting for Amazon Cognito Security Misconfigurations
Explore Amazon Cognito security misconfigurations, including unauthorized access, authentication bypass, and privilege escalation. Learn detection techniques and developer recommendations.
Breaking Managed Identity Barriers in Azure Services
Explore novel approaches to bypass Managed Identities security in Azure Functions and Machine Learning, uncovering vulnerabilities that allow stealthy persistence and token extraction.
NoSQL Injection Tutorial Using PortSwigger - With Labs
Learn MongoDB basics and NoSQL authentication bypass techniques using PortSwigger labs. Enhance your cybersecurity skills with practical examples and expert guidance.
Offensive Azure Security - Red Zone Space
Explore offensive security techniques for Azure, including bypassing authentication, extracting secrets, and gaining control over various Azure services with expert Sergey Chubarov.
Next-Gen IoT Botnets - Bad Implementations of Good Cloud Platforms
Explore security vulnerabilities in IoT cloud platforms, including authentication bypasses and remote code execution. Learn about the risks of poor implementations and their widespread impact on connected devices.
Systems Applications Proxy Pwnage
Explore SAP system vulnerabilities, compression algorithms, and attack techniques. Learn about authentication bypass, validation issues, and practical demonstrations for enhanced security awareness.
Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest
Explore Snuffleupagus, an open-source PHP security module that kills bug classes, implements virtual-patching, and enhances protection against vulnerabilities without modifying application code.
Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices
Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.
Attacking ADFS Endpoints with PowerShell
Explore ADFS endpoint vulnerabilities and attack techniques using PowerShell, focusing on authentication bypass, federation info retrieval, and user enumeration in Office 365 environments.
Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond
Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.
200+ Vulnerabilities in Android Phones
Revealing 200+ vulnerabilities in Samsung Android phones, focusing on authentication bypass and system crashes. Demonstrates fragmentation issues and compares with Google's AOSP, offering insights into Android security.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.
Using Static Binary Analysis to Find Vulnerabilities and Backdoors in Firmware
Explore techniques for detecting vulnerabilities and backdoors in embedded device firmware using static binary analysis, focusing on challenges and automated solutions for complex binary blobs.
Security Journey in French Network Access Controller
Exploration des vulnérabilités des contrôleurs d'accès réseau, en particulier Alcasar. Analyse des failles de sécurité et des moyens de contournement, avec focus sur l'authentification et la protection des mots de passe.